---
id: "CVE-2026-111341"
page: "https://infrastack.ai/live/CVE-2026-111341"
kind: "vulnerability"
aliases: ["CVE-2026-111341"]
title: "Citrix NetScaler: memory overflow in client-certificate login causes crashes"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Citrix NetScaler ADC", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "NetScaler ADC", "fixed": ["14.1-73.57", "13.1-64.39", "14.1-73.58 FIPS", "13.1-37.293"], "affected": "14.1 < 14.1-73.57; 13.1 < 13.1-64.39; 14.1-FIPS < 14.1-73.58; 13.1-FIPS/NDcPP < 13.1-37.293", "ecosystem": "vendor"}, {"name": "NetScaler Gateway", "fixed": ["14.1-73.57", "13.1-64.39"], "affected": "14.1 < 14.1-73.57; 13.1 < 13.1-64.39", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["citrix", "client-certificate", "infrastructure", "netscaler", "netscaler-gateway", "self-hosted"]
not_affected_if: ["managed-hosting", "no-certaction"]
published_at: "2026-11-13T04:17:36+00:00"
first_seen_at: "2026-11-13T04:42:39+00:00"
updated_at: "2026-11-13T04:44:55+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111341", "first_seen_at": "2026-11-13T04:42:39+00:00"}, {"source": "analyst", "url": "https://support.citrix.com/external/article/CTX697305", "first_seen_at": "2026-11-13T04:44:55+00:00", "cites": ["https://support.citrix.com/external/article/CTX697305"]}]
exploit_sources: []
---

# Citrix NetScaler: memory overflow in client-certificate login causes crashes

Link for people: https://infrastack.ai/live/CVE-2026-111341 (this .md is for agents)

A memory overflow in the client-certificate authentication path of Citrix NetScaler ADC and NetScaler Gateway can cause unpredictable or erroneous behavior. The sources say it can also lead to a denial of service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Citrix NetScaler ADC affected range not listed fixed no fixed version listed
- vendor:NetScaler ADC affected 14.1 < 14.1-73.57; 13.1 < 13.1-64.39; 14.1-FIPS < 14.1-73.58; 13.1-FIPS/NDcPP < 13.1-37.293 fixed 14.1-73.57, 13.1-64.39, 14.1-73.58 FIPS, 13.1-37.293
- vendor:NetScaler Gateway affected 14.1 < 14.1-73.57; 13.1 < 13.1-64.39 fixed 14.1-73.57, 13.1-64.39

## How to check

Exposed only if the appliance is configured with a certificate authentication action (CertAction) on NetScaler ADC or Gateway. Inspect the running configuration for a certificate auth action and check the build with 'show version'; builds older than the fixed ones above are affected. Citrix's bulletin points to inspecting the NetScaler configuration for this precondition.

## Fix

Upgrade to NetScaler ADC/Gateway 14.1-73.57 or later, 13.1-64.39 or later (13.1), 14.1-FIPS 14.1-73.58 FIPS or later, or 13.1-FIPS/13.1-NDcPP 13.1-37.293 or later. Customer-managed only; Citrix-managed cloud services are upgraded by Cloud Software Group.

## Timeline

- 2026-11-13T04:42:39+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111341
- 2026-11-13T04:44:55+00:00 analyst https://support.citrix.com/external/article/CTX697305 — Read Citrix CTX697305: precondition is a certificate authentication action (CertAction); fixed builds listed. Affected = anything before fixed builds (stated in bulletin as upgrade targets; 'before' ranges seen only in Kraft Kennedy rewrite). No exploitation or PoC mentioned in bulletin. Bulletin text was truncated before the vendor's check instructions.

## Documents

- [advisory] Citrix NetScaler ADC and Gateway Security Bulletin CTX697305 https://support.citrix.com/external/article/CTX697305

## From the sources

Memory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_